Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: inMSNus7rkFyVAv6PC12EtMemxe4uLhs4/qne9ZGXm4=
Subject key identifier: 97:36:57:F5:AE:B8:AE:8C:14:3E:6F:6C:59:F2:97:5C:41:10:68:1C
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 0199FAD7AF7D469ABE18D5F7D76169D60EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 05:01:03 +0000
Manifest this update: Sun 19 Oct 2025 05:01:03 +0000
Manifest next update: Mon 20 Oct 2025 05:01:03 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: XKdVNVYfLI6AsjkGc96cpatx/z/9Yyx6MtIAEJ3rwcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:af:7d:46:9a:be:18:d5:f7:d7:61:69:d6:0e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Oct 19 05:01:03 2025 GMT
Not After : Oct 20 05:01:03 2025 GMT
Subject: CN=973657f5aeb8ae8c143e6f6c59f2975c4110681c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:30:76:89:67:73:da:47:f1:69:81:8b:1b:
8b:d2:5c:35:ca:a2:9e:3f:bc:22:78:ad:6c:b9:40:
3f:68:ea:e4:75:65:25:39:6e:7e:c4:20:9f:80:ae:
07:d1:b9:6b:2c:61:4d:fc:55:d4:c8:32:33:a3:53:
f7:85:81:37:6e:5d:ed:c4:63:ac:41:b1:58:b1:fd:
6c:03:1e:ab:3a:a8:c1:ef:e3:ee:85:f6:e1:b5:5f:
23:5d:2c:03:94:cd:81:a7:dc:4c:15:da:4f:a7:65:
98:6a:b0:dc:96:94:5f:29:5e:91:f2:59:41:c3:ad:
77:2e:37:46:70:20:72:9e:6e:9c:77:1f:33:49:01:
41:c6:e0:01:5d:d5:fb:c4:37:7b:76:95:28:2e:b8:
09:33:97:a2:33:65:d5:41:ff:bd:d9:eb:72:e7:54:
08:de:62:a8:3e:fb:ec:10:c5:2c:c6:1c:bc:ca:22:
95:f9:ec:90:de:5d:27:d1:23:a9:4a:49:2e:4f:65:
c8:98:2d:87:a6:47:0f:46:d5:c1:94:89:47:d6:a8:
4b:c0:15:d8:d3:21:2a:1e:b8:08:fb:27:31:95:bb:
93:59:91:45:7d:5d:4d:29:ec:f4:8f:6a:4d:38:a2:
e6:33:60:37:ab:3f:2c:6e:36:c3:9b:88:86:a9:74:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:57:F5:AE:B8:AE:8C:14:3E:6F:6C:59:F2:97:5C:41:10:68:1C
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ac:3a:51:79:88:9a:0f:49:ee:7e:79:99:a7:4c:76:d6:dc:
fa:ef:fa:6e:5a:f1:ce:ee:65:31:c5:e4:c7:12:57:92:53:f0:
ff:13:82:e3:32:e0:4f:32:ae:17:0b:e6:f1:e2:17:a6:78:e4:
cb:95:57:3c:cb:b2:6c:5f:55:85:ed:f9:73:1c:a3:b4:16:2f:
03:f7:40:2b:ba:e0:8e:e8:8c:76:47:85:66:78:4b:12:72:ae:
5f:bf:6e:da:32:c2:0f:70:1d:3b:34:8f:44:21:1b:ba:4d:0d:
f2:2c:b7:f2:02:0d:4b:2c:7c:fc:a8:8c:6c:fe:95:1d:11:bf:
f5:9f:90:e3:c3:ac:30:b0:c7:e3:30:44:18:a3:ab:d0:9f:4f:
46:cb:f3:5c:03:74:dc:fb:6b:72:7d:5a:83:da:14:9c:46:b5:
5a:de:8d:54:b9:b4:ed:d3:24:e9:8c:e2:a7:87:ae:8b:c2:53:
32:29:98:79:a1:cd:2f:0a:01:8d:f5:a1:2a:80:fd:7f:e1:ab:
3c:e0:d2:1e:d9:5f:9b:58:4f:1c:d3:09:26:6b:c0:20:b4:a3:
85:02:6f:c0:b3:f8:1a:37:00:dd:cd:ab:a0:32:97:fd:f5:ac:
89:44:21:d7:6f:21:6f:a7:3c:9f:06:88:e0:e5:ea:c0:b5:bd:
18:0a:d4:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61699Rpq+GNX312Fp1g73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1OTY1NDZkNDYyMGIwMmE5NjQyZjA4Yjc3Y2ZlNjUw
MmFlOTkwHhcNMjUxMDE5MDUwMTAzWhcNMjUxMDIwMDUwMTAzWjAzMTEwLwYDVQQD
Eyg5NzM2NTdmNWFlYjhhZThjMTQzZTZmNmM1OWYyOTc1YzQxMTA2ODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/4wdolnc9pH8WmBixuL0lw1yqKe
P7wieK1suUA/aOrkdWUlOW5+xCCfgK4H0blrLGFN/FXUyDIzo1P3hYE3bl3txGOs
QbFYsf1sAx6rOqjB7+PuhfbhtV8jXSwDlM2Bp9xMFdpPp2WYarDclpRfKV6R8llB
w613LjdGcCBynm6cdx8zSQFBxuABXdX7xDd7dpUoLrgJM5eiM2XVQf+92ety51QI
3mKoPvvsEMUsxhy8yiKV+eyQ3l0n0SOpSkkuT2XImC2HpkcPRtXBlIlH1qhLwBXY
0yEqHrgI+ycxlbuTWZFFfV1NKez0j2pNOKLmM2A3qz8sbjbDm4iGqXSXCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc2V/WuuK6MFD5vbFnyl1xBEGgcMB8GA1UdIwQY
MBaAFK/zWWVG1GILAqlkLwi3fP5lAq6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjct
MmFiOWFmOTM4NDM0LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjctMmFiOWFmOTM4NDM0
LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqw6UXmI
mg9J7n55madMdtbc+u/6blrxzu5lMcXkxxJXklPw/xOC4zLgTzKuFwvm8eIXpnjk
y5VXPMuybF9Vhe35cxyjtBYvA/dAK7rgjuiMdkeFZnhLEnKuX79u2jLCD3AdOzSP
RCEbuk0N8iy38gINSyx8/KiMbP6VHRG/9Z+Q48OsMLDH4zBEGKOr0J9PRsvzXAN0
3Ptrcn1ag9oUnEa1Wt6NVLm07dMk6Yzip4eui8JTMimYeaHNLwoBjfWhKoD9f+Gr
PODSHtlfm1hPHNMJJmvAILSjhQJvwLP4GjcA3c2roDKX/fWsiUQh128hb6c8nwaI
4OXqwLW9GArUxQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:01 2025 by rpki-client